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DETAILED ACTION 



Priority 

1 . No claim for priority has been made in this application. 

The effective filing date for the subject matter defined in the pending claims in 
this application is 9/17/2003. 

Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

2. Claim 32 is rejected under 35 U.S.C. 101 because " A computer program product 
having a readable medium " as recited in the claim may be reasonably interpreted as 
being not limited to computer readable storage media, for example, as referred to in 
Specification (SPEC: Page 20 Line 15-22) as being intended to include 
communication media that include signal waves that 'bear" instructions as claimed - for 
example, according to the specification, using baseband signaling or broadband 
signaling techniques, where the operations and methods may be implemented in a soil- 
ware executable objector as a set of instructions embedded in a carrier wave . Thus, for 
at least this reason, claim 32 is directed to a non-statutory subject matter as not being 
tangible and concrete and it would not be eligible for patentability because it would be 
eligible for patentability if a practical application was present that produced a useful, 
concrete and tangible result upon execution of the instructions. 
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3. Claim 33 is rejected under 35 U.S.C. 101 because the Claimed invention is 
directed to non-statutory subject matter. Independent claim 33 is claiming a computer 
data signal, as described in the specification (SPEC: Page 20 Line 21 - 22) is not 
limited to one of the four statutory classes on an invention. In the section cited above, 
applicant discloses "a set of instructions embedded in a carrier wave ". Computer signals 
embodied in a carrier wave do not fall into one of the four statutory classes on an 
invention. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraph of 35 U.S.C. 102 that 
forms the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this . 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

4. Claims 1 - 34 are rejected under 35 U.S.C. 102(e) as being anticipated by Kato 
et al. (U.S. Patent 2002/0040431). 

As per claim 1 and 20, Kato teaches a method for transmitting data according to 
a signature-based protocol comprising: 

generating, at a server (Kato : Para [0079]), a signature corresponding to a 
signature block, the signature block having a covered data portion and an information 
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object portion (Kato : Para [0079] - [0081] and Para [108]: a signature template 
describes a series of "signature target information", which is qualified as a covered data 
and the "digital content" is qualified as an information object portion), the server 
conversant in a predetermined protocol and the signature and signature block being 
conformant with the predetermined protocol (Kato : Para [0003]: conforming to standard 
XML signature syntax / format and processing protocol); 

storing the signature in the signature block (Kato : Para [0079]: XML Signature S 
is considered as a part of the signature block, where signature value is stored at the s2); 

transmitting to a client also conversant in the predetermined protocol (Kato : Para 
[0030]), the signature block, the signature block further operable to store, in the 
information object portion, payload data in a nondestructive manner, the nondestructive 
manner operable to preserve the covered data portion and corresponding signature 
without regenerating the signature (Kato : Para [0088] Last Sentence and Para [0080]: 
(a) the contents (i.e. digital context) of the signed XML document Ds are generated after 
an XML signature (i.e. signature template) is completed (b) each signature target 
information (i.e. covered data) can be individually separate from the digital context - i.e. 
each signature only renders "local significance" (Para [0080]) and thus not required to 
be regenerated (or affected) by the insertion of any other digital context payload). 

As per claim 29, Kato teaches method for transmitting data in a network system 
according to a signature based protocol comprising: 
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identifying, at a server, data adapted for cryptographic transmission (Kato : Para 
[0079]); 

computing a digest on the identified data, the digest substantially indicative of the 
identified data (Kato : Para [0079] - [0081] and Para [108]: a hash (or summary value) 
is a digest value); 

building, according to a cryptographic scripting language (Kato : Para [0003]: 
conforming to standard XML signature syntax / format and processing scripting 
language), a signature block, the signature block having a signed data portion, a 
signature value portion, a key information portion, and at least one information object 
portion (Kato : Para [0079] - [0081] and Para [108]: a signature template describes a 
series of "signature target information", which is qualified as a covered data and the 
"digital content" is qualified as an information object portion); 

storing the identified data in the signed data portion of a signature block (Kato : 
Para [0079] - [0081] and Para [108]: the signature target information is the identified 
data portion); 

retrieving, from a public key infrastructure (PKI) a public and private key pair 
operable for cryptographic operations (Kato : Para [0081] - [0082]); 

generating, at a server, a signature value from the private key corresponding to 
the computed digest, the signature substantially unrecreatable by data other than the 
computed digest (Kato : Para [0081] - [0082]); 
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storing the signature value in the signature value portion of the signature block; 
storing the public key corresponding to the private key in the key information portion to 
provide a self-authenticating transmission (Kato : Para [0079] - [0082]); and 

transmitting, according to the predetermined protocol, the signature block to a 
client (Kato : Para [0030]) also conversant in the scripting language and operable to 
store payload data in the information object portion independently of the signature value 
portion (Kato : Para [0088] Last Sentence and Para [0080]: (a) the contents (i.e. digital 
context) of the signed XML document Ds are generated after an XML signature (i.e. 
signature template) is completed (b) each signature target information (i.e. covered 
data) can be individually separate from the digital context - i.e. each signature only 
renders "local significance" (Para [0080]) and thus not required to be regenerated (or 
affected) by the insertion of any other digital context payload). 

As per claim 10 and 32 - 34, Kato teaches a method for transmitting data from a 
nonsignine client according to a signature based protocol (Kato : Para [0079]: a 
nonsigning client is interpreted as the client that requires and requests the signature 
capability from a server with respect to XML signature), comprising: 

receiving a signature block and a signature corresponding to the signature block, 
the signature block having a covered data portion corresponding to the signature, and 
an information object portion, the receiving client conversant in a predetermined 
protocol and the signature and signature block being conformant with the predetermined 
protocol (Kato : Para [0003] and Para [0030]: (a) conforming to standard XML signature 
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syntax / format and processing scripting language (b) transmitting from a server to a 
client - i.e. received at the client), a signature block, the signature block having a signed 
data portion, a signature value portion, a key information portion, and at least one 
information object portion (Kato : Para [0079] - [0081] and Para [108]: a signature 
template describes a series of "signature target information", which is qualified as a 
covered data and the "digital content" is qualified as an information object portion; 

storing, in the information object portion of the signature block, payload data in a 
nondestructive manner, the nondestructive manner operable to preserve the covered 
data portion and the corresponding signature without regenerating the signature (Kato : 
Para [0088] Last Sentence and Para [0080]: (a) the contents (i.e. digital context) of the 
signed XML document Ds are generated after an XML signature (i.e. signature 
template) is completed (b) each signature target information (i.e. covered data) can be 
individually separate from the digital context - i.e. each signature only renders "local 
significance" (Para [0080]) and thus not required to be regenerated (or affected) by the 
insertion of any other digital context payload); and 

transmitting, according to the predetermined protocol, the signature block to a 
recipient destination conversant in the predetermined protocol, the information object 
portion included in the signature block according to the predetermined protocol (Kato : 
Para [0066]: the application destination is qualified as a recipient destination, which is 
conversant in the predetermined XML signature protocol). 
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As per claim 2, 1 1 and 21 , Kato teaches the signature block further includes a 
signature value portion, the signature value portion operable to store the signature as 
an authentication indicator according to the predetermined protocol, wherein storing 
further comprises storing the signature in the signature value portion (Kato : Para [0079] 
-[0081] and Para [108]). 

As per claim 3, 12 and 22, Kato teaches the signature block further includes a 
key information portion, further comprising storing an authentication indicator to a 
validation instrument in the key information portion, the validation instrument operable to 
authenticate the signature value portion using the signature (Kato : Para [0081] - 
[0082]). 

As per claim 4 and 23, Kato teaches the validation instrument corresponds to an 
inverse operation of the generating of the signature (Kato : Para [0081] - [0082]). 

As per claim 5 and 24, Kato teaches storing in the information object portion 
further comprises storing the payload data at a client, the client being unencumbered by 
signature generation operability (Kato : Para [0088] Last Sentence and Para [0080]: (a) 
the contents (i.e. digital context) of the signed XML document Ds are generated after an 
XML signature (i.e. signature template) is completed (b) each signature target 
information (i.e. covered data) can be individually separate from the digital context - i.e. 
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each signature only renders "local significance" (Para [0080]) and thus not required to 
be regenerated (or affected) by the insertion of any other digital context payload). 

As per claim 6 and 25, Kato teaches storing the payload data further comprises 
generating a transmission block conformant with the predetermined protocol and 
operable to be received as a signature authenticated transmission by a destination node 
according to the predetermined protocol (Kato : Para [0066]: the application destination 
is qualified as a recipient destination, which is conversant in the predetermined XML 
signature protocol). 

As per claim 7 and 26, Kato teaches generating the signature further comprises 
generating a signature corresponding to the covered data portion of the signature block 
(Kato : Para [0079] - [0080]). 

As per claim 8 and 27, Kato teaches computing a digest on the covered data 
portion, the digest substantially indicative of the data in the covered data portion (Kato : 
Para [0079] - [0081] and Para [108]: a hash (or summary value) is a digest value). 

As per claim 9 and 28, Kato teaches the validation instrument is a public key and 
generating the signature further comprises generating a signature using the private key 
corresponding to the public key (Kato : Para [0081] - [0082]). 
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As per claim 13, Kato teaches the receiving is performed by a nonsigning client 
which does not compute the signature and is unencumbered by components operable 
to compute the signature (Kato : Para [0079]: a nonsigning client is interpreted as the 
client that requires and requests the signature capability from a server). 

As per claim 14, Kato teaches indexing a remote signature repository, and the 
client is further operable to store the received signature in the signature block according 
to the predetermined protocol (Kato : Para [0018] Line 10). 

As per claim 15, Kato teaches receiving an authentication instrument 
corresponding to the signature, and storing the received authentication instrument in the 
signature block with the signed information portion and the signature (Kato : Para [0082] 
and Para [0079]). 

As per claim 16, Kato teaches the received authentication instrument is a public 
key corresponding to the private key for generating the signature, and storing further 
comprising forming a self-signed message by storing the public key in the key 
information portion (Kato : Para [0082] and Para [0079]: the public key is stored in the 
XML signature block S corresponding to the private key used to generate the signature 
value for authenticating and/or decrypting the signed info, which is equivalent to self- 
authenticating message (or a self-signed message), according to the instant 
specification (SPEC: Page 1 5 Line 4 - 7)). 
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As per claim 17, Kato teaches at the nonsigning client (Kato : Para [0079]: a 
nonsigning client is interpreted as the client that requires and requests the signature 
capability from a server), a plurality of signatures and corresponding covered data 
portions (Kato : Para [0080]); selecting a first signature for inclusion in a first signature 
message for transmission to a destination recipient; selecting a second signature 
different than the first signature for inclusion in a second signature message for 
transmission to the same destination recipient (Kato : Para [0066] and Para [0080]: (a) a 
destination application is qualified as a destination recipient (b) more than one signature 
target information can be included in the same XML signature block S). 

As per claim 18, Kato teaches selecting the first and second signatures is 
performed based on signature selection logic, the signature selection logic for analyzing 
the covered data portion and the information object portion of the signature message to 
select an expected signature result at the destination recipient (Kato : Para [0079] and 
Para [0080]: the selected covered data portion is the selected signature target 
information with respect to the associated digital content). 

As per claim 19, Kato teaches the signature selection logic is operable for 
analyzing the covered data portion based on at least one of the content type, size, 
creation date, and sparsity of the data (Kato : Para [0079] and Para [0080]: the selected 
covered data portion is the selected signature target information with respect to the 
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associated digital content, which is qualified as sparsity of the data - i.e. not the entire 
payload data content). 



As per claim 30, Kato teaches the scripting language is operable to incorporate 
signature components such that the scripting language is operable with signing 
capability when signature components are available and operable without signing 
capability when signature components are unavailable, further comprising: 

identifying the signature value portion from a subset of available fields in the 
signature block, the signature value corresponding to the identified subset and the 
remaining available fields independent of the signature value (Kato : Para [0079] - 
[0081] and Para [108]); 

identifying, from the remaining available fields, payload data portions operable for 
subsequent storage of data independent of the signature value and the signature value 
portion, the payload data portions operable to be modified by subsequent recipients, 
wherein the signature value portion and corresponding signature value persist as a 
signature block according to the predetermined protocol including the payload data 
portions (Kato : Para [0088] Last Sentence and Para [0080]: (a) the contents (i.e. digital 
context) of the signed XML document Ds are generated after an XML signature (i.e. 
signature template) is completed (b) each signature target information (i.e. covered 
data) can be individually separate from the digital context - i.e. each signature only 
renders "local significance" (Para [0080]) and thus not required to be regenerated (or 
affected) by the insertion of any other digital context payload). 
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As per claim 31, Kato teaches a system for signature use by a nonsigning client 
generating, at a server (Kato : Para [0079]: a nonsigning client is interpreted as the 
client that requires and requests the signature capability from a server), , the nonsigning 
client unencumbered from cryptographic operation components, comprising: 

at the client, identifying payload data adapted for storage in the information 
object portions according. to the scripting language independent of the signature value; 
and storing the identified payload data in the information object portions in a 
nondestructive manner, the nondestructive manner operable to preserve the covered 
data portion and corresponding signature without regenerating the signature, the client 
unencumbered and inoperable to encrypt and decrypt the signed data (Kato : Para 
[0088] Last Sentence and Para [0080]: (a) the contents (i.e. digital context) of the 
signed XML document Ds are generated after an XML signature (i.e. signature 
template) is completed (b) each signature target information (i.e. covered data) can be 
individually separate from the digital context - i.e. each signature only renders "local 
significance" (Para [0080]) and thus not required to be regenerated (or affected) by the 
insertion of any other digital context payload). 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Longbit Chai whose telephone number is 571-272-3788 
The examiner can normally be reached on Monday-Friday 8:00am-4:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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